OAuth is an open-standard authorization protocol or framework that describes how unrelated servers and services can safely allow authenticated access to their assets. It is widely accepted, but be ...

And while not directly responsible for the exploit, the fact OAuth was chained to the Facebook vulnerability puts a spotlight on this popular security standard and the added risks it brings.

However, OAuth tokens are commonly used to automate cloud services such as code repositories and DevOps pipelines, notes Ray Kelly, fellow at NTT Application Security.